In section 6.2 shouldn't the type for the XAUTH-NEXT-PIN attribute be Variable ASCII string (instead of just Variable which implies a binary value)? Also in section 6.2 should it be noted under the description of the XAUTH-CHALLENGE attribute that this attribute SHOULD NOT be used with the Generic (explicit and/or implied) XAUTH-TYPE? (or perhaps MUST NOT). -dave